Download Apache 2.2.19 / 2.3.12 beta

The Apache HTTP Server Project development team has released two new versions of the Apache web server. This server, which is used on many platforms, can be provided with all kinds of extra functions with the help of modules. Version numbers are fixed at 2.2.19 and 2.3.12 beta. The corresponding announcements look like this:

Apache HTTP Server 2.2.19 Released

The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.2.19 of the Apache HTTP Server (“Apache”). This version of Apache is principally a bug fix release, correcting regressions in the httpd 2.2.18 package; the use of that previous 2.2.18 package is discouraged due to these flaws:

• SECURITY: CVE-2011-1928 (cve.mitre.org) A fix in bundled APR 1.4.4 apr_fnmatch() to address CVE-2011-0419 introduced a new vulnerability. httpd workers enter a hung state (100% cpu utilization) after updating to APR 1.4.4. Upgrading to APR 1.4.5 bundled with the httpd 2.2.19 package, or using APR 1.4.3 or prior with the ‘IgnoreClient’ option of the ‘IndexOptions’ directive will circumvent both issues.
• httpd 2.2.18: The ap_unescape_url_keep2f() function signature was inadvertantly changed. This breaks binary compatibility of a number of third-party modules. This httpd-2.2.19 package restores the function signature provided by 2.2.17 and prior.

We consider this release to be the best version of Apache available, and encourage users of all prior versions to upgrade.

Apache HTTP Server 2.3.12 Beta Released

The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.3.12-beta of the Apache HTTP Server (“Apache”). This version of Apache is our second beta release to test new technology and features that are incompatible or too large for the stable 2.2.x branch. This beta release should not be presumed to be compatible with binaries built against any prior or future version.

Apache 2.3 offers numerous enhancements, improvements, and performance boosts over the 2.2 codebase. For an overview of new features introduced since 2.3 please see:
http://httpd.apache.org/docs/trunk/new_features_2_4.html

Please see the CHANGES_2.3 file, linked from the download page, for a full list of changes.

This release includes the Apache Portable Runtime (APR) version 1.4.5 and APR-Util version 1.3.12 in a separate -deps tarball. The APR libraries must be upgraded for all features of httpd to operate correctly.

This release builds on and extends the Apache 2.2 API. Modules written for Apache 2.2 will need to be recompiled in order to run with Apache 2.3, and require minimal or no source code changes.